Lucene search
+L

9567 matches found

CNVD
CNVD
added 2020/07/15 12:00 a.m.15 views

Unspecified Vulnerability in Oracle GoldenGate (CNVD-2020-43707)

OOracle GoldenGate is a comprehensive package for real-time data integration and replication in IT environments from Oracle USA. The product supports real-time data integration, transactional change data capture, data services, transformation and validation capabilities. A security vulnerability...

9.6CVSS9AI score0.01864EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.12 views

Unspecified Vulnerability in Oracle E-Business Suite Application Object Library (CNVD-2020-43700)

Oracle E-Business Suite E-Business Suite is the United States Oracle Oracle company's set of fully integrated global business management software. The software provides customer relationship management, service management, financial management and other functions. Application Object Library AOL,...

4.7CVSS9AI score0.00985EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.5 views

Unspecified Vulnerability in Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

5.5CVSS9AI score0.00769EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.12 views

Unspecified Vulnerability in Oracle Primavera Portfolio Management

Primavera Portfolio Management is a software solution for advising, planning, controlling and strategically analyzing your portfolio. A security vulnerability exists in the Investor Module component in Primavera Portfolio Management 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, 19.0.0. An attacker could...

6.1CVSS9AI score0.00962EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.7 views

Unspecified Vulnerability in Oracle Enterprise Manager Enterprise Manager

Oracle Enterprise Manager is a set of local management platform of the United States Oracle Oracle. The platform is primarily used to manage Oracle product deployments. A security vulnerability exists in Oracle Enterprise Manager Enterprise Manager. An attacker could exploit the vulnerability to...

7.1CVSS9AI score0.01134EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.10 views

Unspecified Vulnerability in Oracle Enterprise Manager Manager Base Platform

Oracle Enterprise Manager is a set of local management platform of the United States Oracle Oracle. The platform is primarily used to manage Oracle product deployments. A security vulnerability exists in Oracle Enterprise Manager Manager Base Platform. An attacker could exploit the vulnerability ...

7.1CVSS8.9AI score0.01103EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/15 12:00 a.m.8 views

Oracle Database Server Application Express Component Cross-Site Scripting Vulnerability (CNVD-2020-44292)

Oracle Database Server is the United States Oracle Oracle a set of relational database management system. The database management system provides data management, distributed processing and other functions. Application Express APEX, formerly known as HTML DB is one of the Web applications for the...

5.4CVSS8.9AI score0.00661EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2020/07/14 7:17 a.m.188 views

New Highly-Critical SAP Bug Could Let Attackers Take Over Corporate Servers

SAP has patched a critical vulnerability impacting the LM Configuration Wizard component in NetWeaver Application Server AS Java platform, allowing an unauthenticated attacker to take control of SAP applications. The bug, dubbed RECON and tracked as CVE-2020-6287, is rated with a maximum CVSS sco...

10CVSS9.9AI score0.94719EPSS
SaveExploits6
Kitploit
Kitploit
added 2020/07/10 5:41 a.m.45 views

Converting MBOX to Outlook Easily

Mail transfer is a common search query. Most commonly, users may migrate due to personal preferences, corporate policies, or support issues. Systems based on the MBOX format are tricky: you may easily export the files, but direct import to Outlook is impossible. That is unless you use the right...

6.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.15 views

The vulnerability of the gf_text_get_utf8_line function in the multimedia platform GPAC, related to writing beyond buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gftextgetutf8line function on the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.5AI score0.01411EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.15 views

The vulnerability of the PuTTY encryption protection tool lies in the use of a less secure encryption algorithm, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PuTTY encryption method lies in the use of a not sufficiently secure encryption algorithm. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.7AI score0.03937EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.12 views

The vulnerability of the hdlr_dump function on the GPAC multimedia platform, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the hdlrdump function on the GPAC multimedia platform relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.02306EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.16 views

The vulnerability of the gf_sm_load_init function on the GPAC multimedia platform, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfsmloadinit function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.7AI score0.01479EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.10 views

The vulnerability of the gf_media_avc_read_sps function on the GPAC multimedia platform, related to the execution of operations beyond buffer boundaries in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gfmediaavcreadsps function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

7.8CVSS7.7AI score0.01496EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:00 a.m.9 views

The vulnerability of the multimedia platform GPAC, related to reading beyond the buffer boundaries, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the GPAC multimedia platform is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.4AI score0.02542EPSS
SaveExploits1References6Affected Software4
Positive Technologies
Positive Technologies
added 2020/07/08 12:00 a.m.10 views

PT-2020-6858 · Cpan +6 · Cpan +6

Name of the Vulnerable Software and Affected Versions: CPAN version 2.28 Description: The issue is related to the incorrect verification of cryptographic signatures in the CPAN language, specifically in the Module::Signature:: verify function. This could allow a remote attacker to access...

9.3CVSS7.5AI score0.01548EPSS
SaveExploits2References48
RedHat Linux
RedHat Linux
added 2020/07/07 7:35 p.m.8 views

grafana: XSS via the OpenTSDB datasource

A flaw was found in grafana Tag value XSS via the OpenTSDB datasource are possible. The highest threat from this vulnerability is to data confidentiality and integrity...

6.1CVSS7.1AI score0.01835EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/07/07 8:38 a.m.11 views

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

7.1CVSS7.4AI score0.01218EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/07/07 12:00 a.m.11 views

The vulnerability in the cross-platform library LibVNCServer’s component libvncserver/scale.c allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the component libvncserver/scale.c of the cross-platform library LibVNCServer is due to a numerical overflow in pixelvalue. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

6.5CVSS7.1AI score0.02452EPSS
SaveExploits0References14Affected Software4
BDU FSTEC
BDU FSTEC
added 2020/07/03 12:00 a.m.12 views

The vulnerability of Azure DevOps Server’s software development tools, related to the failure to take measures to neutralize special elements, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of Azure DevOps Server lies in the lack of measures taken to neutralize specific elements. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

6.1CVSS6.8AI score0.0182EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder